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CN ' Abstract 

I ' I show that a simple multi-party communication task can be performed 

, more efficiently with quantum communication than with classical com- 

' munication, even with low detection efficiency rj. The task is a commu- 

' nication complexity problem in which distant parties need to compute a 

, function of the distributed inputs, while minimizing the amount of com- 

' munication between them. A realistic quantum optical setup is suggested 

I that can demonstrate a five-party quantum protocol with higher-than- 

(-H ■ classical performance, provided rj > 0.33. 

In theory, quantum communication is better than classical communication. 
I Experimentalists, on the other hand, know that even the simplest quantum com- 

^ ■ munication protocols involve inefficiencies in state preparation, manipulation 

^ I and measurement. It is, therefore, important to study sufficient experimental 

(sJ '■ conditions for unambiguous demonstration of the advantages of quantum com- 

^ I munication. Some tasks are only possible with quantum communication, such 

as unconditionally secure cryptographic key distribution |^, ^ . Many authors 
have analyzed the experimental requirements for the security of these protocols 
■ [il Foi' other tasks quantum communication offers an improvement of 

efficiency, and such is the case of communication complexity problems [Q, ||, 
one of which will be analyzed in this paper. In these problems many distant 
parties need to compute a function of the distributed inputs, while trying to 
minimize the amount of communication between them. This abstract problem 
has numerous practical applications, for example in computer networks, VLSI 
circuits and data structures (see |^ for a survey of the field). 

Quantum mechanics can enhance the performance of communication com- 
plexity protocols in two different ways . The first approach is the entanglement- 
based model of communication complexity |ri|, |l^ , where in addition to 
the classical communication we allow the parties to do measurements on previ- 
ously shared multi-party entangled states. Experimental requirements for some 
protocols of this kind have been studied in and it turns out that the 

high detection efficiency needed could be achieved in ion trap experiments . 
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The second way to obtain a genuine quantum advantage is to allow the parties 
to exchange qubits instead of classical bits jl^, |l8|, |l^, ^ . That such a quantum 
communication model may be superior to the classical case is surprising, given 
the results of Holevo and Nielsen |22| that state that no more than n bits 
of expected information can be transmitted by n qubits, if the parties start off 
unentangled. Despite the many theoretical results obtained by different authors 

to date no experiment has been performed to demonstrate the superiority 
of quantum communication for this kind of distributed computation task. In 
this paper I propose a feasible quantum optical experiment which implements 
a quantum protocol with higher-than-classical performance for a specific com- 
munication complexity task. The quantum advantage is shown to arise from 
the use of a quantum phase to encode information. A realistic estimate of all 
experimental limitations shows that it is sufficient to have a single-photon de- 
tection efficiency 77 > 0.33 for the quantum protocol to outperform any classical 
protocol for the same problem. 

The communication complexity problem we will tackle is the Modulo-^ Sum 
problem defined for three parties by Buhrman, Cleve and van Dam [|2|, and 
later generalized to N parties {N > 3) in The problem can be stated 

as follows. Each party Pi receives a two-bit string input x^, subject to the 
constraint: 



l^^x.j mod2 = 0. (1) 

The strings are chosen randomly with an uniform probability distribution among 
those combinations that satisfy eq. Q above. After some communication between 
the parties, one of them (say the last one Pn) must compute the value of the 
Boolean function 




mod 4 



(2) 



In other words, each party is given a number Xi G {0,1,2,3}, subject to the 
constraint that the sum of all Xi is even. After some communication the last 
party must decide whether the sum modulo-4 is equal to or 2. 

References ^ dealt with this problem in the entanglement-based model 
of communication complexity, showing that the amount of classical communica- 
tion necessary to compute F (on inputs constrained by eq. [|) can be decreased 
if the parties are allowed to do local measurements on A^-party Greenberger- 
Horne-Zeilinger (GHZ) states 
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When considering the quantum communication model, we must limit the 
amount of bits (qubits) to be exchanged between the parties and compare the 
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success rates obtained by the optimal classical and the quantum protocols. The 
criterion for a successful demonstration of better-than-classical communication 
is simple: we just need to obtain an experimental quantum success rate which 
is better than that of the optimal classical protocol. 

Let us limit the amount of communication to (A^ — 1) bits (or qubits). An- 
other constraint we impose is that the communication must be sequential, in 
which party Pi can only send information to party P2, who in turn can only 
send a message to party P3 and so on until party P/v, who then computes F. 
The decision to demand sequential communication is related to the fact that the 
sequential quantum communication necessary to solve this problem can be con- 
veniently realized by sending a single photon through a series of optical elements 
representing the parties. 

First, let us obtain the optimal classical success rate for the Modulo-4 Sum 
problem, with only (A^ — 1) bits of sequential classical communication. We start 
by noting that if one of the parties (say party Pj) sends no information to party 
Pj+i, then party P/v cannot compute F correctly with probability pc > 1/2. 
This is so because such a break in the communication flow would leave party 
Pn with no information about the numbers XiX2,---,Xj, and there are as many 
allowed j-tuplcs {xi, X2..--Xj) resulting in F('S*) = 1 as in F(lr*) = 0. Therefore, 
in order to obtain a performance which is better than a random guess, each party 
Pj must send exactly one bit to the next party Pj+i ■ 

For the moment let us consider only deterministic protocols. The first party 
Pi has access only to her two-bit string xi, and so can choose between 2** 
protocols. These can be represented by the four-bit string proti, whose n*'' 
(n = 0,1,2,3) bit encodes the message mi to be sent to P2 if xi = n. The 
other parties Pj {j = 2, N — 1) can choose among 2* protocols that take into 
consideration both Xj and the message mj-i received from the previous party. 
Each of these protocols can be represented by an 8-bit string protj , whose n*'' 
(n = 0, 1, 7) bit encodes the message to be sent when Xj + 2toj_i = n. 

Each possible deterministic protocol can then be represented by the {N— 1)- 
tuple prot = {proti,prot2, ...,proijv-i)- Finding the probability of success of a 
given protocol prot is a straightforward computation. We start by producing 
a list of all possible input data {a;i,X2, ...,xjv-i} compatible with xn = 0, 
computing the messages tojv-i corresponding to each, and finding the fraction 
of cases in which P/v's most likely guess about F would in fact be correct. This 
is repeated for xn = 1,2 and 3, and the results averaged to obtain the overall 
probability of success Pc- The optimal deterministic protocol can then be found 
by a computer search over all 2'*(2*)''^~^ = 2^®^^^^) protocols. 

For number of parties A'' = 3, 4 and 5 I obtained the optimal classical prob- 
ability of success 

P^=' = 3/4, (4) 

= 3/4, 
P^-' = 5/8. 
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A limited search over protocols for larger number of parties yields some lower 
bounds for pc- 



P^=' > 5/8, 
P^=' > 9/16, 
p^=« > 9/16. 



Since Pc is a non-increasing function of N, the result for A'^ = 6 is actually an 
equality: p^^^ — 5/8. The optimal Pc for N — 3,4,5 and 6 is attained by 
many protocols, for example the one consisting of proto = 0011 and all the 
other protj = 01011010. The same protocol yields the lower bounds for the 
optimal probabilities of success presented above for N ~ 7 and 8. Checking 
that these lower bounds are tight would involve a very long exaustive search 
over all protocols. For the purpose of comparison with the quantum protocol 
given below, it would be desirable to obtain at least an analytical upper bound 
for p^ that decreases with N. Unfortunately I could not prove such a general 
result, despite the symmetries of the problem. 

Up to now we have been computing the probability of success for determin- 
istic protocols. In a probabilistic protocol, each party Pj implements her own 
protocol by probabilistically picking a deterministic protocol protj from some 
set of protocols, according to probabilities obtained from a list of random num- 
bers. Since this list of numbers could have been shared beforehand between 
the parties, the last party Ppf can know exactly which protocols were chosen 
by each of the other parties for each run of the probabilistic protocol. This 
means that each run of the probabilistic protocol is effectively a deterministic 
one, with a probability of success bounded by the optimal deterministic Pc de- 
rived above. The relation between deterministic and probabilistic protocols for 
communication complexity tasks is further discussed in chapter 3 of the book 



We have seen that the Modulo-4 Sum problem gets harder and harder to 
solve classically, as the number of parties increases. There is, however, a simple 
quantum protocol with sequential qubit communication that has a probability 
of success Pq — 1 independently of the number of parties involved. The idea is 
to start with the qubit in state 



and send it flying by all the parties, from first to last. Each party needs only 
act upon the qubit with a phase operator (t>{xj), defined as 



by Kushilevitz and Nisan 



|V.> = 4(|o) + |i)) 




|0) -JO) 



,Xj = {0,1,2,3}. 



(5) 



4 



After going through the N phase operations the qubit state will be 



|^/) = -^(|0) + (-l)^(^)|l)), 

due to the constraint |l] on the possible inputs Xj . The last party can then mea- 
sure \ipf) in the {--ij(|0) + |1)), -^(|0) — |1)} basis, obtaining F with probability 

Pq = 1- 

The protocol above is an adaptation of the entanglement-based protocol 
presented in [ p^ to the qubit-communication setting. In the entanglement- 
based protocol each party performs a phase operation and measurement on her 
qubit of the iV-party GHZ state they share. The value of the function F is 
encoded in the quantum phase (see eq. ||), by individual phase shifts applied 
by each party on her particle. The last party Pn obtains the value of F from 
the results of the N measurements (hers plus the N — 1 broadcast to her by 
the other parties). The probability of success is pq = 1 only when all the N 
detections are successful, hence the high detection efficiencies required for a 
higher-than-classical performance |p^ . Here we obtain the same performance 
by using the phase of a single qubit to acquire information on F as it flies by the 
parties towards the last party P^, where a single detection reveals the result. 

The detection efficiency rj must still be taken into account, as it lowers the 
probability of success of the quantum protocol. For the moment, let us assume 
that the only limitation in implementing the protocol is < 1 (we will deal 
with the more realistic case below). In case of a successful detection (which 
occurs with probability ij) the probability of success is equal to one. In case 
the detection fails (probability 1 — rj), the last party Pat has to make a random 
guess about the value of F, succeeding only with probability 1/2. Thus for a 
higher-than-classical performance we need to implement the quantum protocol 
with a detection efficiency rj such that 



V+i^-v)^>Pc- (6) 

Thus, it is sufficient to have rj > 2pc — l. We have seen that the optimal classical 
protocol for iV = 5 parties has a success rate p^^^ = 5/8, and therefore can 
be beaten by the quantum protocol if the detection efficiency rj > 0.25, in the 
absence of other experimental losses. 

For a more realistic grasp of the experimental difficulties, let us examine a 
simple quantum optical setup that implements the quantum protocol for this 
problem. The flying qubit is encoded in the polarization state of a single photon. 
For a fair comparison with the classical protocol, it is important to allow only 
a single photon per run to pass by the parties and arrive at Ppj. One way to 
achieve this is to use a parametric down conversion crystal pumped by a laser. 
Detection of one of the twin photons generated can then be used as a trigger to 
let the second photon go towards the parties. For the triggering mechanism to 
work we need to introduce a delay for the second photon, which can be easily 
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achieved by coupling it to a few meters of optical fiber. Upon detection of the 
first photon, the second photon is allowed to come through the N parties. Each 
party consists of an optical element using birefringent materials to perform the 
phase shift given by eq. ^ In the end, the last party P/v must also detect the 
photon in the proper basis. 

Such a setup has other imperfections that must be considered, besides the 
limited detection efficiency ?/. The first is the finite transmissivity t of the 
combination of N birefringent plates used to introduce the phase shifts 4>{xj). 
Another problem is the fraction fi of detected events which are due to detector 
dark counts. Finally, even if the detected photon is a signal photon, the success 
rate s of the quantum protocol can be less than perfect, because of imperfec- 
tions and misalignment of the optical elements that produce the initial state, 
introduce the phase shifts and measure the final polarization. Taking all these 
limitations into account, for a higher-than-classical probability of success we 
would need: 



/ = (1 - + [1 - (1 - fiM- > Pc. (7) 

Now let us make some realistic estimates for these parameters for the protocol 
with N — 5 parties. By using quartz plates with anti-reflection coating, it is 
possible to obtain transmission of a fraction 0.995 of the incident photons per 
plate, which in the case of five parties would result in t = (0.995)^ ~ 0.975. It 
is relatively straightforward to bring dark count rates below the 1% level psf , 
so let us take /i = 0.01. Good alignment of the optical elements should enable 
a success rate of s ~ 0.90 whenever a signal photon is detected; for example, 
visibilities of up to 96% in simple Bell tests using entangled photons have been 
reported ||2^ . Plugging these estimates for t, fi and s in inequality ^, we see that 
in order to obtain a better-than-classical probability of success it is sufficient to 
have a detection efficiency rj > 0.33, which is within reach of current technology 
[ p3| . It is reasonable to conjecture that the optimal continues to decrease 
for > 7, in which case the sufficient detection efficiency could be dramatically 
lower. In principle, one way to calculate for > 7 is through an exhaustive 
search over all deterministic protocols, as was done here for A^ = 3, 4 and 5. 

It is clear that essentially the same setup can be used to solve the Modulo-4 
Sum problem using classical polarized light. In common with a qubit, clas- 
sical light has a continuous variable (the phase) that can be manipulated, as 
opposed to classical bits that can only assume two discrete values. The counter- 
intuitive quantum feature that helps in communication complexity is the fact 
that even single photons still retain the continuous description of the classical 
electromagnetic field. More generally, a d-dimensional pure quantum state is 
characterized by 2{d — 1) real parameters that can be used for communication 
purposes, as opposed to the d discrete states available to a classical system of 
same dimensionality. Defining exactly for which communication tasks such a 
different resource can be used to advantage is a central research problem in 
quantum information theory. 
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In summary, I have shown that an experimental demonstration of a quan- 
tum communication complexity protocol is feasible using a realistic quantum 
optical setup with photon detection efficiency of at least 33%. By increasing 
the number of parties N it should be possible to reduce the minimum detection 
efficiency required dramatically, provided we can compute the corresponding op- 
timal classical probability of success . This can in principle be achieved by the 
methods employed here, or possibly by other, simpler arguments. The higher- 
than-classical performance of the quantum communication protocol arises di- 
rectly from the use of a quantum phase to encode information. If implemented, 
this would be the first experiment to demonstrate the superiority of quantum 
communication over classical communication for distributed computation tasks. 

I would like to thank Lucien Hardy for fruitful discussions and for his support 
and encouragement. I also thank Antia Lamas-Linares for helpful discussions 
about quantum optics experiments. I acknowledge support from the U.K. Over- 
seas Research Studentships scheme and from the Brazilian agency Coordenagao 
de Aperfeigoamento de Pessoal de Nivel Superior (CAPES). 

Note added: After this work was completed, it came to my attention that 
the three-party qubit communication protocol has recently been discussed in 
ref. p4[ |, which is an extended version ofref. 

References 

[1] C. H. Bennett and G. Brassard, in Proc. IEEE Int. Conf. on Computers, 
Systems and Signal Processing, Bangalore, India (1984), pp. 175-179. 



[2 

[3 
[4 
[5 
[6] 

[7] 



[9 

[lo; 

[11 
[12; 



A. K. Ekcrt, Phys. Rev. Lett. 67, 661 (1991). 

C. H. Bennett, Phys. Rev. Lett. 68, 3121 (1992). 

H.-K. Lo and H. F. Chau, Science 283, 2050 (1999). 

P. W. Shor and J. Preskill, Phys. Rev. Lett. 85, 441 (2000). 

H. Aschauer and H. J. Bricgcl, LANL preprint |quant-ph/000805l| (2000). 



A. C. Yao, in Proc. 11th Ann. ACM Symp. on Theory of Computing (1979), 
pp. 209-213. 

E. Kushilevitz and N. Nisan, Communication Complexity, Cambridge Uni- 
versity Press, 1997. 



G. Brassard, LANL preprint :iuant-ph/0101005 (2001) 



R. Cleve and H. Buhrman, Phys. Rev. A 56, 1201 (1997). 
L. K. Grovcr, LANL preprint |^ant-ph/97040T^ (1997). 



H. Buhrman, R. Cleve and W. van Dam, LANL preprint quant-ph/9705033 
(1997). 



7 



H. Buhrman et at, Phys. Rev. A 60, 2737 (1999). 

W. van Dam, Non-locality & Communication Complexity, PhD Thesis, De- 
partment of Physics, University of Oxford (1999). 



E. F. Galvao, LANL preprint quant-ph/0009014 (2000). 



M. A. Rowe et a/.. Nature 409, 791 (2001). 

A. C. Yao, in Proc. of the 34th Ann. IEEE Symp. on Foundations of Com- 
puter Science (1993), pp 352-361. 

H. Buhrman, R. Cleve and A. Wigderson, in Proceedings of the 30th Annual 
ACM Symposium on Theory of Computing, May 1998, pp. 63-68. 

R. Cleve, W. van Dam, M. Nielsen and A. Tapp, in Quantum Computing 
and Quantum Communication: Proceedings of First NASA International 
Conference, Lecture Notes in Computer Science, vol. 1509, Springer- Verlag 
(1999), pp 61-74. 

R. Raz, in Proceedings of the 31st Annual ACM Symposium on Theory of 
Computing, May 1999, pp. 358-367. 

A. Holevo, Problemy Peredachi Informatsii 9, no. 3 (1973), pp. 3-11. En- 
glish translation in Problems of Information Transmission 9 (1973), pp. 
177-183. 

M. A. Nielsen, Quantum Information Theory, PhD Thesis, Department of 
Physics, University of New Mexico (1998). Available as a LANL preprint 
|quant-ph/0011036| . 



C. Kurtsiefer, M. Oberparleiter and H. Weinfurter, Phys. Rev. A 64, 023802 
(2001). 

H. Buhrman, R. Cleve and W. van Dam, Siam J. Comput. 30 (6), 1829 
(2001). 



8 



